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Amendments to the Claims : 

This listing of claims replaces all prior versions and listings of claims in the application: 
Listing of Claims : 

1. (Cancelled) 

2. (currently amended) A method for providing service facilities to a mobile 
program in a distributed system having nodes, comprising 

in an operating environment in each of the nodes of the distributed system, providing 
service facilities useful to the mobile program, 

in the service facilities , running a supervisor process that allows the mobile program 
indirect access to make use of the node's operating environment, 

the supervisor process creating a bastion object in an unrestricted environment to protect 
the unrestricted environment and passing it into running the bastion object in a restricted 
environment within which the mobile program is running. 

3. (previously presented) The method of claim 2 in which the bastion object 
provides an interface for the mobile program to access the service facilities in a safe manner and 
which is substantially the same interface as the interface that the service facilities provide in the 
unrestricted environment. 

4. (previously presented) The method of claim 2 in which the bastion object 
performs type checking on all method calls made by a mobile program to a service facility. 

5. (previously presented) A method for use in a distributed system for processing a 
mobile program that executes in one node of the distributed system, may be interrupted at almost 
any point in its execution, and may be moved to another node of the distributed system for 
further execution, comprising 

in the one node, capturing a current state of the mobile program execution, 
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delivering the captured state and program code of the mobile program to the other node, 

and 

continuing execution at the other node from the point of interruption based on the 
captured state and the program code. 

6. (previously presented) The method of claim 5 further comprising 

also delivering with the captured state and the program code a transported file system or 
other information created during execution of the mobile program. 

7. (previously presented) The method of claim 6 in which the information in the 
transported file system or other information is accessible without executing the mobile program. 

8. (previously presented) The method of claim 5 in which the step of capturing 
comprises using an encoding scheme of a language interpreter. 

9. (currently amended) A method for enabling communication with a mobile 
program running in a distributed system, a mobile program service station, an extension, or 
another application, comprising 

providing a mechanism which p e rmits enables each of the m obile program and? the 
mobile program service station, the extension, aad-or the other application to identify services 
that it provides, and p e rmits enables each of them to find services that it needs^afidr 

enabling th e mobil e program to communicat e with mobil e program s e rvic e stations via 
obj e cts associat e d with th e m e chanism. 

10. (previously presented) The method of claim 9 in which each of the objects is 
provided by a supervisor process ninning in the distributed system and prevents uncontrolled 
access to a needed service. 

1 1 . (previously presented) The method of claim 9 in which the mechanism includes a 
broker and a manager. 

12. (previously presented) The method of claim 9 in which the objects are data typed. 

1 3 . (previously presented) A method for enabling negotiation between two unrelated 
mobile programs, mobile service stations, extensions, or other applications, in a distributed 
system, comprising 
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in an operating environment in a node of the distributed system, receiving information 
from one of the two mobile programs, mobile program service stations, extensions, or other 
applications, concerning a transaction offered to other mobile programs, mobile program service 
stations, extensions, or other applications, 

in the operating environment in the node, receiving information from the second of the 
two mobile programs, mobile programs service stations, extensions, or other applications 
concerning a transaction in which the second of the mobile programs, mobile program service 
stations, extensions, and other applications wishes to engage, 

notifying the second mobile program, mobile program service station, extension, or other 
application of the one mobile program, mobile program service station, extension, or other 
application, and 

enabling the two mobile programs, mobile program service stations, extensions, or other 
applications to communicate concerning the transaction. 

14. (previously presented) The method of claim 13 in which the information is 
received from two mobile programs by a third mobile program. 

15. (previously presented) A method for enabling action by an operating environment 
in a distributed system with respect to a mobile program which is programmed in a language that 
is not fully suppQrted by the operating environment, comprising 

labeling a mobile program to identify operating environment features required for support 
of the mobile program, 

in an operating environment, examining the labeling of the mobile program to determine 
whether the operating environment supports the identified features, and 

taking an action based on whether the identified features are supported. 

16. (previously presented) The method of claim 15 wherein the action comprises 
sending the mobile program to another operating environment for processing. 

17. (previously presented) The method of claim 15 in which the action comprises 
retrieving nonprogram specific data from the mobile program. 
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1 8. (previously presented) A method for aiding communication with a mobile 
program executing in a distributed system, the method comprising 

maintaining a name space of identifiers that uniquely identify one or more types of 
information that may be communicated, and 

in connection with a communication, using the identifiers to indicate the one or more 
types of information being communicated. 

1 9. (previously presented) The method of claim 1 8 in which the mobile program 
registers or otherwise records an interface which includes the identifier of the type of information 
that is to be communicated. 

20. (cancelled) 

21. (cancelled) 

22. (cancelled) 

23. (cancelled) 

24. (previously presented) A method for controlling interaction between a mobile 
program and an application running in an operating environment provided at a node of a 
distributed system, comprising 

defining a trusted portion of the operating environment which provides trusted services to 
the mobile program, 

requiring portions of the application running in the operating environment to be 
registered as trusted, and 

permitting indirect interaction via the operating environment between the mobile program 
and the application running in the operating environment only if the portions of the application 
required to be registered have been registered. 

25. (previously presented) A method for enabling a mobile program to carry out 
defined functions including otherwise unsafe functions, through the use of extensions comprising 

coding safe extensions to an operating environment and to an interpretive language under 
which the mobile program runs, and 
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permitting the mobile program to carry out the defined functions by making use of the 
extensions. 

26. (previously presented) The method of claim 9 in which the mechanism comprises 
a connector mechanism, and the objects comprise connector objects. 

27. (previously presented) The method of claim 2 in which the service facilities of the 
operating environment are used to access other resources not part of the operating environment. 

28. (previously presented) The method of claim 2 in which the supervisor process 
prohibits unauthorized access to the service facilities of the operating environment. 

29. (previously presented) The method of claim 18 in which the name space allocates 
unique identifiers to one or more types of information. 

30. (new) The method of claim 9 also including 

enabling the mobile program to communicate with mobile program service 
stations via objects associated with the mechanism. 



